Characterization of Host-Level Application Traffic with Multi-Scale Gamma Model

Yosuke HIMURA  Kensuke FUKUDA  Patrice ABRY  Kenjiro CHO  Hiroshi ESAKI  

IEICE TRANSACTIONS on Communications   Vol.E93-B   No.11   pp.3048-3057
Publication Date: 2010/11/01
Online ISSN: 1745-1345
DOI: 10.1587/transcom.E93.B.3048
Print ISSN: 0916-8516
Type of Manuscript: PAPER
Category: Internet
traffic analysis,  model evaluation,  traffic characterization,  multi-scale gamma model,  

Full Text: PDF(1.3MB)>>
Buy this Article

In this paper, we discuss the validity of the multi-scale gamma model and characterize the differences in host-level application traffic with this model by using a real traffic trace collected on a 150-Mbps transpacific link. First, we investigate the dependency of the model (parameters α and β, and fitting accuracy ε) on time scale Δ, then find suitable time scales for the model. Second, we inspect the relations among α, β, and ε, in order to characterize the differences in the types of applications. The main findings of the paper are as follows. (1) Different types of applications show different dependencies of α, β, and ε on Δ, and display different suitable Δs for the model. The model is more accurate if the traffic consists of intermittently-sent packets than other. (2) More appropriate models are obtained with specific α and β values (e.g., 0.1 < α < 1, and β < 2 for Δ = 500 ms). Also, application-specific traffic presents specific ranges of α, β, and ε for each Δ, so that these characteristics can be used in application identification methods such as anomaly detection and other machine learning methods.